[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi1GfALbfU3uiE-gcOKRztVm5xIXRcz-dwFCXdw2t-Sw":3,"g5a-family:redhat\u002Fenterprise_linux_for_arm_64":160,"g5a-ex:redhat\u002Fenterprise_linux_for_arm_64@*":164},{"success":4,"data":5},true,{"product":6,"versions":45,"topVulnerabilitiesByEpss":56,"kevVulnerabilities":116,"seoMetadata":138,"meta":157},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":44},"redhat","enterprise_linux_for_arm_64",10,40,5,"2025-06-12",[14,19,21,24,28,31,34,37,39,42],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0_aarch64",1,0,false,{"version":20,"cve_count":16,"kev_count":16,"has_kev":4},"7.0_aarch64",{"version":22,"cve_count":23,"kev_count":16,"has_kev":4},"8.0",9,{"version":25,"cve_count":26,"kev_count":27,"has_kev":4},"8.0_aarch64",17,2,{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"8.8_aarch64",4,{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},"9.0",7,{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},"9.0_aarch64",16,{"version":38,"cve_count":27,"kev_count":17,"has_kev":18},"9.2",{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"9.2_aarch64",8,{"version":43,"cve_count":41,"kev_count":17,"has_kev":18},"9.4_aarch64","Enterprise Linux For Arm 64 by Redhat is a technology product with 10 tracked versions and 40 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[46,47,48,49,50,51,52,53,54,55],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":16,"has_kev":4},{"version":22,"cve_count":23,"kev_count":16,"has_kev":4},{"version":25,"cve_count":26,"kev_count":27,"has_kev":4},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},{"version":38,"cve_count":27,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":41,"kev_count":17,"has_kev":18},[57,64,71,77,83,89,94,99,104,111],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":23,"cvssVersion":61,"severity":62,"isKev":4,"epssScore":63},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","v3.1","Critical",0.99999,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":61,"severity":69,"isKev":4,"epssScore":70},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,"High",0.99748,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":61,"severity":69,"isKev":18,"epssScore":76},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","2024-07-01",8.1,0.99506,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":61,"severity":69,"isKev":18,"epssScore":82},"CVE-2023-46847","Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.","2023-11-03",7.5,0.88351,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":61,"severity":69,"isKev":4,"epssScore":88},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,0.65005,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":87,"cvssVersion":61,"severity":69,"isKev":4,"epssScore":93},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":87,"cvssVersion":61,"severity":69,"isKev":4,"epssScore":98},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":81,"cvssVersion":61,"severity":69,"isKev":18,"epssScore":103},"CVE-2024-12085","A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","2025-01-14",0.08823,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":61,"severity":109,"isKev":18,"epssScore":110},"CVE-2019-6470","There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.","2019-11-01",6.5,"Medium",0.08813,{"cveId":112,"description":113,"publishedDate":80,"cvssScore":114,"cvssVersion":61,"severity":62,"isKev":18,"epssScore":115},"CVE-2023-46846","SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request\u002FResponse smuggling past firewall and frontend security systems.",9.3,0.0621,[117,122,127,131,134],{"cveId":90,"description":91,"publishedDate":92,"cvssScore":87,"severity":69,"isKev":4,"epssScore":93,"cisaVulnName":118,"cisaDateAdded":119,"cisaShortDescription":120,"cisaRequiredAction":121},"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"severity":69,"isKev":4,"epssScore":70,"cisaVulnName":123,"cisaDateAdded":124,"cisaShortDescription":125,"cisaRequiredAction":126},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","2022-03-25","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.","Apply updates per vendor instructions.",{"cveId":95,"description":96,"publishedDate":97,"cvssScore":87,"severity":69,"isKev":4,"epssScore":98,"cisaVulnName":128,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":126},"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":23,"severity":62,"isKev":4,"epssScore":63,"cisaVulnName":132,"cisaDateAdded":133,"cisaShortDescription":59,"cisaRequiredAction":126},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"severity":69,"isKev":4,"epssScore":88,"cisaVulnName":135,"cisaDateAdded":136,"cisaShortDescription":137,"cisaRequiredAction":126},"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":139,"metaDescription":140,"keywords":141,"structuredData":142},"Enterprise Linux For Arm 64 by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Linux For Arm 64 by Redhat covering 10 versions with 40 tracked vulnerabilities including 1 critical and 4 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux For Arm 64 vulnerabilities, Enterprise Linux For Arm 64 security, Enterprise Linux For Arm 64 CVE, Redhat Enterprise Linux For Arm 64, Enterprise Linux For Arm 64 threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux For Arm 64 KEV, Enterprise Linux For Arm 64 exploited vulnerabilities",{"@context":143,"@type":144,"name":145,"description":140,"url":146,"manufacturer":147,"applicationCategory":151,"softwareVersion":152,"mainEntity":153},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux For Arm 64","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_for_arm_64",{"@type":148,"name":149,"url":150},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","10 versions tracked",{"@type":154,"name":155,"description":156,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux For Arm 64 Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux For Arm 64 by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":158,"apiVersion":159},"2026-10-17T15:53:02.491Z","3.0",[161],{"product":162,"cves":163},"enterprise_linux_for_arm_64_eus",31,{"rows":165,"total":11,"capped":18,"failed":17},[166,170,174,178,182],{"cveId":90,"name":118,"severity":69,"cvss":87,"added":119,"epss":93,"published":167,"ranges":168,"checked":4,"hits":169,"covers":18},"2023-10-03T18:15:10.463",[35],[],{"cveId":65,"name":123,"severity":69,"cvss":68,"added":124,"epss":70,"published":171,"ranges":172,"checked":4,"hits":173,"covers":18},"2019-10-28T15:15:13.863",[25],[],{"cveId":95,"name":128,"severity":69,"cvss":87,"added":129,"epss":98,"published":175,"ranges":176,"checked":4,"hits":177,"covers":18},"2019-07-17T13:15:10.687",[20],[],{"cveId":58,"name":132,"severity":62,"cvss":23,"added":133,"epss":63,"published":179,"ranges":180,"checked":4,"hits":181,"covers":18},"2021-09-16T15:15:07.633",[22],[],{"cveId":84,"name":135,"severity":69,"cvss":87,"added":136,"epss":88,"published":183,"ranges":184,"checked":4,"hits":185,"covers":18},"2019-04-08T22:29:00.387",[25],[]]